Skip to main content

AWS_EffectivePermissions Job

The AWS_EffectivePermissions job identifies and summarizes effective permissions on AWS S3 buckets and bucket objects.

Analysis Tasks for the AWS_Accounts Job​

Navigate to the AWS > 6.S3 Permissions > AWS_EffectivePermissions > Configure node and select Analysis to view the analysis tasks.

warning

Do not modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.

Analysis Tasks for the AWS_Accounts Job

The following analysis tasks are selected by default:

  • S3 Bucket Effective Permissions – AWS S3 Bucket effective permissions for each identity. Creates the AWS_EffectiveBucketPermissions_Details table accessible under the job’s Results node.
  • S3 Bucket Effective Permission Summary – Summarizes permission counts across AWS S3 Buckets. Creates the AWS_EffectiveBucketPermissions_Summary table accessible under the job’s Results node.

Report for the AWS_EffectivePermissions Job​

In addition to the tables and views created by the analysis task, the AWS_EffectivePermissions job produces the following preconfigured report:

ReportDescriptionDefault TagsReport Element
Effective PermissionsThis report identifies and summarizes effective permissions on AWS S3 Buckets.NoneThis report is comprised of the following elements:
  • Stacked Bar Chart – Displays top buckets by effective permissions
  • Table – Shows buckets by effective permissions
  • Table – Provides details on effective permissions